ima: re-evaluate file integrity on file metadata change
authorStefan Berger <stefanb@linux.ibm.com>
Fri, 23 Feb 2024 17:25:10 +0000 (12:25 -0500)
committerMimi Zohar <zohar@linux.ibm.com>
Tue, 9 Apr 2024 21:14:57 +0000 (17:14 -0400)
commitcd9b909a117210bfd77a89bb06a3154c1fc51b51
treee258bd0296c3401b5ab9352bb282ad0ad14b96cd
parenta652aa59068bd78d96a1ab6ea7c0c4d3c79fb5e8
ima: re-evaluate file integrity on file metadata change

Force a file's integrity to be re-evaluated on file metadata change by
resetting both the IMA and EVM status flags.

Co-developed-by: Mimi Zohar <zohar@linux.ibm.com>
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
security/integrity/ima/ima_main.c